Static task
static1
Behavioral task
behavioral1
Sample
JOYRP | ФАЙЛЫ/server_connect.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
JOYRP | ФАЙЛЫ/server_connect.dll
Resource
win10v2004-20230831-en
General
-
Target
ad651fcc79e346a5026b3aa5bce00dc053a45ec08be1f318eb00e93f7a02ad3f
-
Size
8KB
-
MD5
7bd965fa8d2da3ff934004b84aa2cc95
-
SHA1
faece932c8f0076642e8b50f91f9cb59f7f8db72
-
SHA256
ad651fcc79e346a5026b3aa5bce00dc053a45ec08be1f318eb00e93f7a02ad3f
-
SHA512
5775d778d96a94a006a180400499e22298f210367d60cf9b58b4200dad02612f03c0a36cf4f123f25b4143235d330ade23432ac739a5c90ac5259f0b9254dc67
-
SSDEEP
192:iuneXGI/mGNwXxttxg6PbUEY5ztakPwpGoSY9hMKE+k:iEebmbttxg6PoDRPwpGbJd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/JOYRP | ФАЙЛЫ/server_connect.asi
Files
-
ad651fcc79e346a5026b3aa5bce00dc053a45ec08be1f318eb00e93f7a02ad3f.zip
-
JOYRP | ФАЙЛЫ/server_connect.asi.dll windows x86
51fba5a49e52489166360599ea3696f7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VirtualProtect
GetCurrentDirectoryA
GetModuleHandleA
Sleep
GetPrivateProfileIntA
VirtualQuery
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
vcruntime140
memset
_except_handler4_common
__std_type_info_destroy_list
api-ms-win-crt-runtime-l1-1-0
_initterm
_execute_onexit_table
_beginthread
_cexit
_initterm_e
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initialize_onexit_table
api-ms-win-crt-string-l1-1-0
strncat
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 1012B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
JOYRP | ФАЙЛЫ/server_connect.ini